CVE-2007-3429

CVE-2007-3429 affects the e107 CMS (signup.php) ≤ 0.7.8 when photograph upload is enabled. The underlying issue is an unrestricted file upload that lets an attacker supply a filename with a double extension (e.g., .php.jpg) to upload and execute arbitrary PHP code. Documented impact indicates rem...